Forum Discussion

Marco_Kamner's avatar
Marco_Kamner
Icon for Altostratus rankAltostratus
Jun 02, 2021

/32 IPs in Datagroup class match not matching

Hello everyone, maybe someone had a similar issue before and can guide me in the right direction as I can't find anything regarding this on the whole of the internet. Lets assume a simple iRule...
application delivery
iRules
LTM
  • Marco_Kamner's avatar
    Marco_Kamner
    Jun 07, 2021

    Thanks to the suggestion of using a external data group by  we did dig in to this again.

    Before going into how we solved this I just want to say that we are going to look into filing a issue about this and some of my technical understanding of the cause may be flawed.

    The root of the issue lies expression:

    [class match [IP::client_addr] equals ipv4_monitoring]

    The internal datagroup ipv4_monitoring was created with this content:

    • 198.51.100.0/24
    • 203.0.113.2/32

    And, looking at bigip.conf, we can verify that this gets persisted into configuration.

    But, whatever we add with /32 it will not match -> This is where we will look into filing a issue with F5, I will update this thread as applicable.

    Now we remove and recreate the data group using a external data group containing this:

    network 198.51.100.0/24,
host 203.0.113.2,

    And now we get a match in the expression in question and can live happily ever after

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jun 14, 2021

Have had info from F5 about the issue?

 

 

Also you may check if the internal data groups work when used with Local Traffic Policy and not an iRule as the Local Traffic Policies have less bugs than iRules as Local traffic policies are F5 checked and verified.

 

 

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/big-ip-local-traffic-management-getting-started-with-policies-14-0-0/01.html

 

 

 

Also you want to test mcpd reload just in case as this will clean the bigip.conf file issues as we see that there are issues with internal but not external data groups.

 

 

https://support.f5.com/csp/article/K13030